==========================================================================
Ubuntu Security Notice USN-2755-1
September 30, 2015

cyrus-sasl2 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 15.04

Summary:

Cyrus SASL could be made to crash if it processed specially crafted input.

Software Description:
– cyrus-sasl2: Cyrus Simple Authentication and Security Layer

Details:

It was discovered that Cyrus SASL incorrectly handled certain invalid
password salts. An attacker could use this issue to cause Cyrus SASL to
crash, resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.04:
libsasl2-2 2.1.26.dfsg1-13ubuntu0.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-2755-1
CVE-2013-4122

Package Information:
https://launchpad.net/ubuntu/+source/cyrus-sasl2/2.1.26.dfsg1-13ubuntu0.1

—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2
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=+5rL
—–END PGP SIGNATURE—–
—